When you’re new to VPNs, remember that “payment complete” and “ready to use” are two different things. Payment activates your account benefits; the client reads your configuration and routes the relevant traffic. On your first day, work through the order, subscription, client, connection, and verification in sequence. If you don’t see the expected result at any step, stop and check there—you don’t need to explore every advanced setting right away.
Check activation: confirm your account benefits before troubleshooting the connection
Sign in through the website and check your account, order status, and plan benefits in the user panel. A successful payment page only confirms that the payment step completed successfully. To confirm activation, check that the order and benefits shown in the panel match. If you have several account windows open in your browser, make sure you haven’t mistaken an empty panel for a different account as an activation failure.
If you’ve been charged but the order still shows as incomplete, refresh the order page and keep your transaction receipt. Then check with support through the panel. Don’t pay again just to try to change the status, and don’t post your payment receipt in a public forum. Contact BaiVPN support through the support tickets in the user panel, and explain the difference between your order and the status shown in the panel.
It’s also worth understanding how plan benefits are calculated: BaiVPN monthly subscription data resets on the activation date, so don’t assume it resets on the first of each calendar month. Data add-ons never expire. If you upgrade a monthly subscription partway through the billing period, the price difference is prorated based on the remaining days. Data shown in your account doesn’t mean the client has downloaded the route configuration—that happens in a later import step.
- ✅ The account you’re signed into matches the account used to place the order, and the order matches the plan benefits shown.
- ✅ Note your activation status and data usage, but never post your account credentials publicly.
- ❌ Paying repeatedly before checking the order, or assuming a connection problem means the payment failed.
Get your subscription: the link is a configuration credential, not a regular webpage
Here, “subscription link” means the address a client uses to retrieve route configuration, not a billing method for your plan. It may contain account-specific credentials. Anyone who copies the link may be able to access the associated configuration, so treat it like a password. Don’t include it in public screenshots, online conversion tools, or chats with strangers.
Use the subscription or client configuration option in the user panel, and follow the instructions shown there. If import options are listed by client, choose the one that matches your software. If you’re asked to copy the link manually, copy the full address without omitting trailing parameters or adding line breaks. Don’t use the marketing homepage or sign-in page as your subscription address.
Some subscription links display plain text in a browser or trigger a configuration file download. That doesn’t necessarily indicate a problem. To check whether the import worked, see if the client can read the configuration and list the routes; don’t judge by whether the browser shows a polished webpage. If you think the link has been exposed, use the reset option in the panel. If there isn’t one, contact support and update your client afterward.
When troubleshooting, you can share error messages, but don’t send your full subscription link, QR code, or configuration file. A QR code may contain the same account credentials, and hiding the surrounding text won’t protect them.
Choose a client: start by checking your operating system and configuration format
“VPN” is often used as a catch-all term for different network connection tools, but a proxy client may not route all traffic from your device. System proxy settings usually affect only apps that follow them. TUN or a system network extension can route more traffic, though the exact scope depends on the operating system and client. When installing a client for the first time, use the setup guides to choose an option that fits your device. Download clients from the client download section in the user panel.
| Platform | Installation and permissions | What to check after connecting |
|---|---|---|
| Windows | Choose a version from the guide. Features such as TUN may require administrator access or a virtual network component. | Check whether system proxy or TUN is enabled as intended, and whether another tool is using the proxy settings. |
| macOS | Check processor and operating system compatibility. Allow the required network extension or VPN configuration when prompted. | Check that permissions have been granted and the client has actually started connecting, rather than simply appearing in the menu bar. |
| Android | Verify the download source. Allow the VPN connection when prompted, and check app routing and background restrictions. | Check whether the target app is excluded and whether system power-saving settings affect the connection in the background. |
| iOS / iPadOS | Use a compatible client as described in the guide, and allow it to add a VPN configuration. | Check which network configuration is active and whether its rules and region match what you need. |
| Linux | Check the distribution, client core, and permission requirements. Setup differs between graphical and command-line clients. | Check whether the proxy environment, routing, and DNS are working as intended for the selected mode. |
Protocol names aren’t interchangeable. Shadowsocks, VMess, Trojan, VLESS, Hysteria2, and TUIC are different proxy protocols or solutions, each with its own client support and configuration format. A client that can import a link may not support every route in it. These names also don’t mean BaiVPN necessarily offers every protocol; check the panel and guides for supported options.
If you see an unsupported protocol, unknown proxy type, or configuration parsing error, first check the client version and subscription format. Don’t change a protocol field to a different name or delete unfamiliar configuration options just to get it to parse. The interface may open, but the connection could lose required settings.
Import and connect for the first time: check the result at every step
- Add the subscription. Paste the address into the subscription or configuration field in your client, or use the one-click import option if the panel explicitly provides one. You should see a configuration entry—not an empty input field.
- Update the configuration. Run the client’s update. You should see route names and policy groups. If you see a subscription name but no routes to choose from, check the update error.
- Activate the right configuration. Some clients let you save multiple configurations. Make sure the one you’re using is the one you just imported; otherwise, you may have updated a new subscription while still running an older configuration.
- Choose a route and routing mode. Start with the routing rules recommended in the guide, then choose a region based on what you need. If you’re unsure, pick a region that suits the target service. Don’t change DNS, routing, and advanced protocol settings all at once.
- Connect and grant permissions. Make sure the required permissions are granted and the client shows that it’s running. Simply opening the client window isn’t enough: if system proxy or network routing is still disabled, your traffic may not use the route.
- Reopen the target app. After switching routes, close the existing connection and test the app again. The client’s button changing color doesn’t prove that the app is using the new route.
For your first setup, complete the whole process on one device before configuring others. BaiVPN has no limit on the number of devices connected at the same time, but you still need to manage plan data based on your actual usage. Unlimited devices don’t mean that video, file syncing, and system updates use no data, or that it’s safe to share your account credentials publicly.
What counts as a successful first connection: The configuration updates, the target app works as expected, and everyday services that don’t need a proxy still work. A latency test can provide useful information, but it can’t replace checking a webpage, playing content, or submitting a request.
Verify the connection: distinguish routes, regions, and DNS
First, try a local website that normally works, then try a target site that needs an international route. If the local site stops working but the target site works, your routing rules may be sending traffic through the proxy when they shouldn’t. If the local site works but the target site doesn’t, check whether the target app is using the proxy, whether the route connects, and whether the service itself allows access. Change one setting at a time so you can tell what made a difference.
Check the target service itself to verify the region, not just your apparent IP address. Streaming catalogs and AI services may consider your IP address, account region, payment details, and existing sessions. Connecting through a route in a particular country doesn’t guarantee that a service will work or show specific content. Existing browser sessions can also affect the result, so reopen the target app after switching routes.
DNS translates domain names into IP addresses. A DNS leak usually means that DNS requests aren’t following the expected route; it’s separate from whether webpage traffic is going through a proxy. A test page showing the name of a DNS provider doesn’t, on its own, prove a leak. Check it against the client’s DNS policy, routing rules, and system settings.
Secure DNS in your browser, DNS settings in other network tools, and cached data can all complicate test results. Start with the configuration recommended in the guide. If needed, check the client logs to see which rules match the domain and where its traffic goes. Don’t blindly enter a DNS address you found online just because you see an unfamiliar provider, and don’t treat disabling security features as a default fix.
IEPL, transit, and direct connections describe how a route is set up, not a client protocol. A direct connection usually links your device to an overseas access point. A transit connection passes through an additional relay, while IEPL uses a dedicated link. None of these alone guarantees a consistent experience across all apps; your local network, time of day, and target service all matter. To compare available regions and route types, see the routes page.
Troubleshooting: focus on the step that failed
Subscription update failed or route list is empty
First, confirm that your local network works. Then check that the address is complete, your account benefits are active, and your client supports the subscription format. If the update needs a particular network connection, follow the instructions in the guide rather than converting the subscription on an unfamiliar website. If the error points to a parsing issue, check compatibility first. If it points to a failed request, check the network and subscription source.
The client says connected, but the target app won’t open
Check whether the target app follows the system proxy and whether your routing rules exclude it. If the proxy works only in your browser, check which traffic the client routes instead of switching regions again. If the guide requires TUN or a network extension, make sure it’s actually enabled. Temporarily quit other proxy tools to prevent conflicting settings, but don’t disable your system firewall without a good reason.
Regular websites stop working after you quit the client
The system proxy may still point to the local client, which has stopped running. Check your system proxy settings and disable the proxy as described by the client. If you enabled TUN, confirm that it has stopped properly too. Once your connection is restored, start the client again and check. This isn’t related to how much plan data you have, and reimporting the subscription usually won’t fix leftover proxy settings.
Some routes work, but others don’t
Keep the configuration that works, then test a route for the region you need and compare results on different local networks. A failed test on one route doesn’t mean the entire service is unavailable, and a successful client test doesn’t prove that every app will work. Note the target app, route name, local network type, and error so support can investigate with useful details.
When asking for help, spell out which step worked and which failed—for example, the configuration updated successfully, the browser can connect, but the target app shows an error. Before sharing a screenshot, hide your subscription address, QR code, account credentials, and personal information. For a more systematic troubleshooting process, see the troubleshooting guide.
Wrap up your first day: save a setup you can reuse
Once your everyday apps work as expected, note the client, active configuration, routing mode, and regions that work for you. You don’t need every test page to show the same result, and there’s no need to keep switching client cores over an unfamiliar metric. If something goes wrong later, return to this verified setup first. That usually makes it easier to find the cause than reinstalling everything.
Finally, make sure your subscription credentials are stored safely, your network works after you quit the client, and your data usage matches your habits. If the service isn’t meeting your needs, contact support first. BaiVPN offers a no-questions-asked full refund within 30 days of your first payment. For current plans and benefits, see the plans page.